Malaysia needs more than cybersecurity protection. It needs the people, expertise and forensic capabilities to investigate digital crimes, preserve evidence and bring offenders to justice.

As Malaysia accelerates its digital transformation, the demand for cybersecurity expertise is becoming increasingly important.

Businesses, financial institutions, government agencies and ordinary citizens are operating in an environment where digital threats can have serious financial, operational and legal consequences.

However, protecting digital infrastructure is only one part of the equation. When a cyber incident occurs, investigators must establish what happened, identify the methods used, preserve digital evidence and support the legal process.

This is where digital forensics and cyber forensic specialists become essential to Malaysia’s cybersecurity ecosystem.

With Budget 2027 approaching, the Government should consider a dedicated investment programme to expand Malaysia’s cyber forensic workforce, strengthen investigative capabilities and create a sustainable pipeline of local specialists.

The need is not simply to produce more cybersecurity graduates. It is to develop professionals with the specialised technical, investigative and legal knowledge required to handle increasingly complex digital evidence.

The shortage of specialists deserves greater attention

Malaysia’s cybersecurity conversation often focuses on cyber defence, security operations centres, threat detection and infrastructure protection. While these capabilities are important, forensic investigation deserves equally serious consideration.

A digital forensic specialist must understand how to acquire and examine evidence from computers, mobile devices, servers, networks and other digital environments. The role also requires knowledge of evidence preservation, documentation, chain of custody and the preparation of findings that may be presented in court.

This demonstrates that cyber forensics is not merely an extension of conventional IT support. It is a specialised discipline requiring dedicated education, practical experience and professional development.
The challenge is how Malaysia can produce enough qualified specialists to meet the needs of law enforcement, government agencies and the private sector while retaining experienced professionals within the country.

1. Make TVET a pathway into cyber forensics

One area that deserves greater attention in Budget 2027 is Technical and Vocational Education and Training (TVET).

Malaysia should recognise that not every cyber forensic professional needs to begin with a conventional university degree. A well-designed

TVET pathway could help develop technically competent personnel who can support forensic laboratories, incident response teams and digital investigations.

TVET institutions could introduce specialised programmes and micro-credentials in areas such as:

-Digital evidence collection and handling.
-Computer hardware and storage device examination.
-Mobile device forensic fundamentals.
-Network monitoring and digital log analysis.
-Cybersecurity incident response.
-Forensic laboratory procedures and documentation.
-Operating systems, file systems and data recovery fundamentals.

These programmes should combine classroom learning with practical laboratory exercises, simulated investigations and industry placements.

Students could learn how to identify potential digital evidence, preserve its integrity, document investigative procedures and assist qualified investigators under appropriate supervision.

Budget 2027 should consider dedicated funding to help TVET institutions establish cyber forensic training laboratories, acquire relevant tools and develop industry-recognised curriculum.

Partnerships between TVET institutions, universities, cybersecurity companies and relevant government agencies could also provide students with access to practical expertise and employment opportunities.

Importantly, TVET should not be treated as a lower-level alternative to university education. It should be recognised as a complementary route into a profession that requires people with different levels of technical specialisation.

A graduate with strong practical skills in device examination, evidence acquisition or laboratory operations could later pursue advanced certifications, specialist qualifications or further academic studies.

This creates a progression pathway in which individuals can enter the workforce, gain experience and continue developing their capabilities.
The Government should also encourage employers to recognise relevant TVET qualifications when recruiting for suitable technical roles, while maintaining appropriate competency and evidentiary standards for personnel undertaking independent forensic examinations.

By expanding TVET opportunities, Malaysia could widen access to cyber forensic careers and strengthen the technical workforce supporting more advanced investigative specialists.

2. Establish a national cyber forensic training and certification initiative

Malaysia should consider supporting a structured national training initiative that brings together universities, law enforcement agencies, cybersecurity organisations and industry practitioners.

The objective should be to provide aspiring specialists with practical exposure to real-world investigative methods.

Training should include simulated cybercrime investigations, forensic laboratory exercises, evidence handling, incident reconstruction and the preparation of forensic reports.

The Government could also introduce financial assistance for professional certifications and continuing education, particularly for investigators and technical personnel who wish to specialise in digital forensics.

Such a programme should recognise that professional competence requires more than completing a course. Specialists need supervised experience, continuing training and opportunities to work with evolving technologies.

3. Strengthen forensic laboratories and investigative infrastructure

Developing specialists without providing them with appropriate investigative facilities would limit the impact of investment in education.

Budget 2027 should therefore consider targeted funding for digital forensic laboratories and modern investigative equipment.

These facilities could support the examination of mobile devices, computers, cloud-based evidence, network logs and other digital artefacts.

Investment should also cover secure evidence storage, forensic acquisition tools, analytical software, laboratory infrastructure and systems that support evidence integrity.

Where appropriate, regional forensic facilities could improve access to specialist capabilities beyond major urban centres.

A coordinated approach involving relevant government agencies, universities and qualified industry partners could also reduce unnecessary duplication and encourage the sharing of expertise, subject to legal authority, confidentiality and evidence-handling requirements.

4. Create career pathways for cyber forensic professionals

Recruiting specialists is only part of the challenge. Malaysia must also consider how to retain them.

This issue deserves attention in the digital forensic profession as well.
Budget 2027 could support a review of specialist career structures, professional allowances, competency-based progression and opportunities for advanced technical training.

A specialist should not necessarily have to leave forensic investigation to advance professionally.

Clearer career pathways could help institutions retain experienced personnel, preserve organisational knowledge and develop senior investigators capable of mentoring the next generation.

5. Prepare forensic specialists for AI-driven and emerging threats

The nature of digital evidence is changing.

Artificial intelligence, cloud computing, encrypted communications, connected devices and increasingly sophisticated cyber incidents are creating new investigative challenges.

Forensic specialists must be prepared to examine complex digital environments and understand how emerging technologies affect the collection, interpretation and reliability of evidence.

Malaysia should consider supporting research into AI-assisted forensic analysis, automated evidence processing and tools that help investigators examine large volumes of digital information.
However, AI-generated findings must not automatically be treated as conclusive evidence.

Investigators need the ability to validate analytical results, identify limitations, document their methods and explain their findings clearly.

Training and research funding should therefore address both technological capability and the reliability, transparency and legal admissibility of forensic evidence.

Conclusion: Cyber forensic capability is an investment in national resilience

Malaysia’s digital economy requires a workforce capable not only of preventing cyber incidents but also of investigating them when they occur.

The development of digital forensic specialists should therefore be treated as a strategic component of the country’s broader cybersecurity and justice capabilities.

Budget 2027 presents an opportunity to consider a coordinated approach encompassing scholarships, TVET pathways, specialised training, forensic laboratories, career development, industry collaboration and research into emerging technologies.

The Government should begin with a comprehensive assessment of Malaysia’s existing cyber forensic workforce and investigative requirements. That assessment could then guide funding priorities, training targets and a longer-term workforce development strategy.

Malaysia should also recognise the complementary roles of universities and TVET institutions.

While universities can develop advanced research and specialist expertise, TVET can provide practical technical training and help widen access to entry-level opportunities in the digital forensic ecosystem.

The country must develop its own generation of cyber forensic professionals, equip them with the right tools and give them clear opportunities to build long-term careers in the field.

The future of cybersecurity depends not only on how effectively Malaysia protects its digital infrastructure, but also on how effectively it can investigate digital crimes, establish the facts and support justice through reliable evidence.

For Budget 2027, investing in cyber forensic talent — from TVET graduates to advanced forensic specialists — would be an investment in Malaysia’s digital resilience, institutional capability and confidence in the digital economy.

About the Author

Ramani Parkunan, a former Outreach and Training Executive at CyberSecurity Malaysia, transitioned from the cybersecurity industry into journalism and media. Now a Technology and Cybersecurity Writer and Editor-in-Chief of Press KL, he advocates the advancement of cyber forensics in Malaysia, highlighting the importance of developing specialist talent, strengthening digital investigation capabilities and preparing the nation to address evolving cyber threats.

Email the writer at hipzmedia@gmail.com for any digital forensic advisory, writings and expertise.